CVE-2024-41160 Liteos-A has an use after free vulnerability

in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through use after free...

CVE-2024-41160 Liteos-A has an use after free vulnerability

in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through use after free...

CVE-2024-41157 Liteos-A has an use after free vulnerability

in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through use after free...

CVE-2024-41157 Liteos-A has an use after free vulnerability

in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through use after free...

CVE-2024-28044 Liteos-A has an integer overflow vulnerability

in OpenHarmony v4.1.0 and prior versions allow a local attacker cause crash through integer overflow...

CVE-2024-28044 Liteos-A has an integer overflow vulnerability

in OpenHarmony v4.1.0 and prior versions allow a local attacker cause crash through integer overflow...

Malicious code in @diotoborg/quia-ad-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98c734f897b1830249d8f67ad0ad66de189830b9397f10099cc9eb13463a1262 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8099 Malicious code in @diotoborg/a-quas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e75db1a313c99e1007d48ff45703fa7114a4d51db0fa97fc81f0f2618d2cfbd9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/a-quas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e75db1a313c99e1007d48ff45703fa7114a4d51db0fa97fc81f0f2618d2cfbd9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/distinctio-a-doloremque (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e5eb578ed87430f02702424684db712aafe5999422bcbcfa4f644a75484e3ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8228 Malicious code in @diotoborg/distinctio-a-doloremque (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e5eb578ed87430f02702424684db712aafe5999422bcbcfa4f644a75484e3ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

OpenHarmony 安全漏洞

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation OpenAtom Foundation Foundation. A security vulnerability exists in OpenHarmony version v4.1.0 and earlier versions, which stems from the liteosa use-after-release vulnerability...

OpenHarmony 安全漏洞

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation OpenAtom Foundation Foundation. A security vulnerability exists in OpenHarmony version v4.1.0 and earlier versions, which stems from a liteosa integer overflow vulnerability...

OpenHarmony 安全漏洞

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation OpenAtom Foundation Foundation. A security vulnerability exists in OpenHarmony version v4.1.0 and earlier versions, which stems from the liteosa kernel use-after-release vulnerability...

ASB-A-349916584

Bulletin has no description...

CVE-2024-43961 WordPress azurecurve Toggle Show/Hide plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in azurecurve azurecurve Toggle Show/Hide allows Stored XSS.This issue affects azurecurve Toggle Show/Hide: from n/a through 2.1.3...

BlackByte Ransomware Exploits VMware ESXi Flaw in Latest Attack Wave

The threat actors behind the BlackByte ransomware group have been observed likely exploiting a recently patched security flaw impacting VMware ESXi hypervisors, while also leveraging various vulnerable drivers to disarm security protections. "The BlackByte ransomware group continues to leverage...

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: nftables: nftsetrbtree skip end interval element from gc CVE-2024-26581 kernel: netfilter: nftlimit: reject configurations that cause integer overflow CVE-2024-26668 kernel: vfio/pci: Loc...

New macOS Malware "Cthulhu Stealer" Targets Apple Users' Data

Cybersecurity researchers have uncovered a new information stealer that's designed to target Apple macOS hosts and harvest a wide range of information, underscoring how threat actors are increasingly setting their sights on the operating system. Dubbed Cthulhu Stealer, the malware has been...

CVE-2024-43880

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumaclerp: Fix object nesting warning ACLs in Spectrum-2 and newer ASICs can reside in the algorithmic TCAM A-TCAM or in the ordinary circuit TCAM C-TCAM. The former can contain more ACLs i.e., tc filters, but the...